Flatpak wurde in Version 1.18.1 veröffentlicht.
Flatpak ist ein Framework zur Verteilung und Sandbox-Isolation von Linux-Anwendungen, unabhängig von der genutzten Distribution.
Die Version ist ein reines Sicherheits-Release und schließt zehn CVEs, darunter mehrere Sandbox-Escapes und eine lokale Rechteausweitung auf Root. Ein Update wird dringend empfohlen.
Security Fixes:
- Fix sandbox escape with full host filesystem read/write access via symlink attack on app data directories (GHSA-8688-9x26-hhxj)
- Fix local root privilege escalation via revokefs symlink path traversal and commit tampering (GHSA-qrwq-7qwx-q9rp)
- Fix arbitrary root write via symlink and path traversal in extra-data extraction (GHSA-fqx6-vh4p-42cg)
- Fix arbitrary root write via path traversal in
flatpak build-init(GHSA-8qxj-x646-phcm)- Fix arbitrary host file read via hardlink path traversal in OCI archive extraction (GHSA-9rww-v4mm-x4jg)
- Fix path traversal via unvalidated architecture parameter in DeployAppstream (GHSA-v2gw-v9h5-9q4x)
- Fix buffer overflow in OCI delta stream path names on 32-bit systems (GHSA-jr92-2v97-wgvc)
- Fix fixed-filename writes to arbitrary locations via symlink attack on .ld.so (GHSA-99wv-m8rp-g58x)
- Fix extension metadata path traversal allowing host filesystem probing and unintended mount locations (GHSA-w69g-9x8j-7p8f)
- Fix anti-downgrade bypass allowing unprivileged users to downgrade system apps (GHSA-q4gr-vc25-57m5)
Bug Fixes:
- Portal flatpak-spawn environment handling regression (#6721)
- Negated permission strings for allow and share run options (#6684)
- Build failure when exporting metainfo releases.xml files (#6698)
- Portal update monitor and OCI JSON handling crashes (#6692, #6704)
- File forwarding of empty paths error handling (#6693)
- OCI signature verification and TLS certificate application (#6682, #6685)
Quelle: GitHub